A secure cookie protocol